It’s tough to know the place to start out to address all of them. It’s just as not easy to know when to stop. Threat modeling might help. Reconnaissance is actually a pivotal move in almost any innovative cyberattack and can be carried out the two online and offline. https://www.researchgate.net/publication/365308473_Development_of_Cyber_Attack_Model_for_Private_Network